www.gnugrounds.com

Issued by R3

About this certificate

This digital certificate with serial number 03:f7:b5:54:74:3c:fa:cd:fe:ad:af:f1:45:6b:5b:84:7f:53 was issued on by Let's Encrypt.

With 30 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.gnugrounds.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f7:b5:54:74:3c:fa:cd:fe:ad:af:f1:45:6b:5b:84:7f:53
Serial Number (int): 345627631202516551173224650246897988304723
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 99:9f:6f:43:7e:20:9b:73:98:f3:58:9d:4e:46:ce:f9:c1:75:2d:f4
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): e7:68:fb:c9:a3:68:25:04:18:49:04:d7:95:7b:27:c2:c8:91:31:ea
Fingerprint (sha256): 52:c0:2a:52:8a:bf:62:d4:7a:72:55:b3:09:ed:65:a2:ae:00:60:b1:88:e6:0a:7c:0e:a7:85:43:1e:51:1a:21

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.gnugrounds.com

30

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.gnugrounds.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

applefilmawards.com
buildyourownstream.com
chattanoogasportsdoctor.com
crediteducationtools.com
florisvermeulen.com
geotrossi.com
gnugrounds.com
healthycatadvisor.com
houseion.com
mycatholicchildren.com
oregonstemcells.com
sotastoves.com
stemcellcedarrapids.com
today3d.com
trailerloop.com
www.applefilmawards.com
www.buildyourownstream.com
www.chattanoogasportsdoctor.com
www.crediteducationtools.com
www.florisvermeulen.com
www.geotrossi.com
www.gnugrounds.com
www.healthycatadvisor.com
www.houseion.com
www.mycatholicchildren.com
www.oregonstemcells.com
www.sotastoves.com
www.stemcellcedarrapids.com
www.today3d.com
www.trailerloop.com

Other certificates including the domain name gnugrounds.com

(limited to 100 certificates)
www.gnugrounds.com
www.cashbuyersofvegas.com

Certificate

The complete raw certificate details for www.gnugrounds.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpP5cIZ9vNWWAqjOVnLm
L/oNQ3abBtl9nSSWu25XUsaD/BxdKDLjei3RKzGchjI10422GucO5a0ewaye4o54
OAFyVtcJNoBjXWAUz5DkaC6JDeC7z2R+Xink6WnY0mmWPExo6yqum12qAs0lxxLg
B6CCWCMiourUMcnyDXVHMeccy1Dj0d+nvjAULiQhCP2X+VPor1FhAcSnSXqIseb+
1HmkHcM7Cw62x5wFsM6UkObAFoapXOqyfoaEucsSJjYe706G2/B2iOddAWtroUsF
afGaEecTShMf7BqfStydsVqWQzqEOZou2QezMNWcJx/sMSuIRknnBuOR9+ZFVSxC
UwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 345627631202516551173224650246897988304723
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-13 14:15:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-11 14:15:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.gnugrounds.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23048340386860090511726171745616174695453742106484231267454168574326119345669854291159616885887582367235048443107415002565500721415993211052206092703443864273113846086238179596584209113129407946256575529220293913864204099851711396828965600548551360342311798033519771442403372060718719467629078274891114453946689965379988068392530297123746790031823879818106142195103975851005097479958416059698536075527761682287602715751266487358851086655568817206138943488147728718763175860191237607905578192738348404136141242253987711485385209362672656805139260941424949145733949035895469548385883246253652005190357589411149875266131
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							999f6f437e209b7398f3589d4e46cef9c1752df4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (674 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'applefilmawards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buildyourownstream.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chattanoogasportsdoctor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crediteducationtools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'florisvermeulen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geotrossi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gnugrounds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthycatadvisor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'houseion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mycatholicchildren.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oregonstemcells.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sotastoves.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stemcellcedarrapids.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'today3d.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trailerloop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.applefilmawards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.buildyourownstream.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chattanoogasportsdoctor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crediteducationtools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.florisvermeulen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.geotrossi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gnugrounds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.healthycatadvisor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.houseion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mycatholicchildren.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oregonstemcells.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sotastoves.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stemcellcedarrapids.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.today3d.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trailerloop.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001894fd2a9e800000403004630440220451e143ef17a66a1164f616957805e54f5e458847798e1deab005160f84f430302206042f3ae28a80f1e02feab0fd1c4dfebbf0d7435e94a38afe3534fd1e629edcd007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb499000001894fd2a9d1000004030047304502203cb53f8f32eb6df765c4b8a21e6309d12ca80603dd29dca3d1fb6debdb153e19022100815cb04e038898741bcad3911fc49538c5c9d824c4d60a3e4097c562adffd78a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00b09945cd830e4c7dfec863fd0cba2462ffd9bdb2c114d5ba3f4955ac86f3a2100c1b6b595c2b410b210962a9669461eeabab3d2f84fd45422a2254a63380d2a9decec17d04a8df71090e3d2ff49b2b5c04ca80a97513e5cf9a60332b7b8746879278cec57f4569faff73d6f4405b14ea8652a1566cc4ba955adeaee58f6e7fcae4e49bf545d12915feab80e036c21dff5762f9d48c357e80d5bb007fb7a8d59c4c851e919156ae541acd1721b7aa49e881049722f3f2cbeb123401f432a5bd1d0a04932afcb2d8622d447b628e8d05fccdc516ad427dd02f326b30211272f08b5e17c6ba0b267a4646a39699e049803fc5fd7c772c051c5ae525d02f49c11070